fixes for

F-1428: Missing ForceZero on sg_buf Containing Decrypted Plaintext in AES-GCM Non-Stream Path
F-3293: AES-CCM Non-Contiguous SG Path Missing ForceZero on sg_buf Containing Decrypted Plaintext
This commit is contained in:
Daniel Pouzzner
2026-06-12 17:45:12 -05:00
parent c071c29eca
commit ab69af541f
+2
View File
@@ -1515,6 +1515,7 @@ static int AesGcmCrypt_1(struct aead_request *req, int decrypt_p, int rfc4106_p)
out:
if (sg_buf) {
ForceZero(sg_buf, req->assoclen + req->cryptlen);
free(sg_buf);
}
else {
@@ -2009,6 +2010,7 @@ static int AesCcmCrypt_1(struct aead_request *req, int decrypt_p, int rfc4309_p)
out:
if (sg_buf) {
ForceZero(sg_buf, req->assoclen + req->cryptlen);
free(sg_buf);
}
else {